Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99ac6b2e-f1ff-34c0-bdb6-3b112fcaf8af.roa
File: 99ac6b2e-f1ff-34c0-bdb6-3b112fcaf8af.roa (raw, json)
Hash identifier: NrhIAFLLx9KjWF5bYPw74fDBVmDKLKwnsLf9d7Dh5Ss=
Subject key identifier: 64:8A:FF:B2:F3:12:2A:51:01:16:B6:4E:E2:78:0D:64:A5:6B:7A:3E
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584847E030202E08B03BE7298940
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99ac6b2e-f1ff-34c0-bdb6-3b112fcaf8af.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 7342
IP address blocks: 2620:74:4c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:30:20:2e:08:b0:3b:e7:29:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=7532a8ce-0802-49c7-b5fb-f1af67d128e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:be:2d:b3:b0:5b:6a:ec:b8:cd:88:82:2f:de:
22:8a:c8:ac:20:24:1c:f7:2d:bf:24:c1:8e:91:24:
0b:52:28:82:91:a8:d5:03:0f:2c:16:51:40:c7:22:
4e:79:31:51:23:54:3c:b8:bb:47:2a:9e:b2:4f:6e:
32:0f:4d:9d:54:88:1b:a8:15:c2:51:02:f8:cf:fa:
12:1c:c0:7a:b9:c5:31:1e:0d:cd:20:49:cd:e5:aa:
4a:f7:e9:9a:75:df:c7:2d:29:9c:cf:be:29:40:ed:
90:fa:0b:93:4c:de:b6:ea:0c:59:7c:5f:51:c7:58:
0f:ac:87:30:77:53:7f:ed:77:05:c7:ed:5b:a6:be:
ca:64:8e:09:98:44:8b:07:52:c2:d9:88:98:73:e1:
34:8e:6f:b5:75:96:a6:a6:5d:0f:e8:f6:8c:db:0e:
04:af:31:7e:6a:6a:02:03:0c:f3:44:0e:db:f2:3c:
f7:2b:a8:98:fc:77:13:70:ef:59:f4:73:6b:ab:9c:
c7:ae:54:44:5c:d8:0e:62:50:28:5c:89:7d:d6:0d:
cf:0b:49:1d:13:c8:2e:6b:89:3b:48:56:e9:7f:8b:
89:ad:99:62:4b:33:af:c0:0e:32:af:f7:9c:b5:68:
32:5e:bf:09:bb:43:44:d3:cd:d0:23:e3:9a:85:98:
a6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8A:FF:B2:F3:12:2A:51:01:16:B6:4E:E2:78:0D:64:A5:6B:7A:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99ac6b2e-f1ff-34c0-bdb6-3b112fcaf8af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:4c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:57:2d:e9:aa:70:b9:23:16:f0:0b:0a:10:45:84:5f:17:e1:
f3:84:58:1e:1a:08:35:61:4a:93:3d:b5:d5:ce:38:fc:15:01:
7e:30:72:4b:89:f7:0e:57:b9:2b:02:11:c5:14:f3:9e:53:f6:
cb:f6:7e:d3:7f:bf:54:84:c3:29:80:0b:8c:3f:cc:5b:91:3c:
d7:6c:89:22:a2:98:84:76:b8:08:e6:9f:23:26:47:dd:0a:ac:
0e:84:68:4f:69:c1:76:59:54:22:37:3a:29:e1:d4:01:6b:9a:
54:35:b4:16:b8:a6:14:1f:b0:dd:bb:13:89:ac:99:e8:d2:d9:
39:48:2d:24:11:5e:37:e1:b5:0b:10:92:09:1c:c4:f9:95:11:
07:fc:c8:c1:95:ff:16:11:8c:6e:5a:e2:91:bd:db:97:8f:bb:
9b:0f:46:23:e7:f4:3c:51:e5:5e:2d:5d:31:e5:c8:5c:93:95:
75:05:91:63:ba:b7:f6:17:67:aa:9b:b3:a8:63:09:0e:76:34:
c7:5f:dc:4b:37:82:57:09:99:e4:f8:20:63:f9:9b:ec:dd:4c:
c5:34:a4:cb:d5:b3:57:2a:91:d0:78:e4:02:96:01:bb:19:3a:
4e:0a:c2:e0:2e:44:92:ed:fd:7a:8c:2f:bf:fb:0e:ce:9d:79:
88:d3:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:20:57 2025 by rpki-client